Lucene search
CISACISA-KEV-CVE-2024-38856HistoryAug 27, 2024 - 12:00 a.m.
Apache OFBiz Incorrect Authorization Vulnerability
2024-08-2700:00:00
CISA
www.cisa.gov
146
apache ofbiz
incorrect authorization
vulnerability
remote code execution
groovy payload
unauthenticated attacker
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
Low
EPSS
0.933
Percentile
99.1%
Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.
Related
githubexploit
githubexploit
Exploit for Incorrect Authorization in Apache Ofbiz
2024-08-10 03:05:34
Exploit for Incorrect Authorization in Apache Ofbiz
2024-08-08 02:40:56
Exploit for Incorrect Authorization in Apache Ofbiz
2024-08-28 03:17:22
nvd
nvd
CVE-2024-38856
2024-08-05 09:15:56
cvelist
cvelist
cve
cve
CVE-2024-38856
2024-08-05 09:15:56
vulnrichment
vulnrichment
nessus
nessus
Apache OFBiz < 18.12.15 Remote Code Execution (CVE-2024-38856)
2024-08-30 00:00:00
nuclei
nuclei
Apache OFBiz - Remote Code Execution
2024-08-05 09:16:52
attackerkb
attackerkb
CVE-2024-38856
2024-08-05 00:00:00
metasploit
metasploit
Apache OFBiz forgotPassword/ProgramExport RCE
2024-06-14 23:41:12
thn
thn
CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports
2024-08-28 06:50:00
New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution
2024-08-06 04:16:00
rapid7blog
rapid7blog
CVE-2024-45195: Apache OFBiz Unauthenticated Remote Code Execution (Fixed)
2024-09-05 14:54:31
Metasploit Weekly Wrap-Up 08/30/2024
2024-08-30 18:43:05
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
Low
EPSS
0.933
Percentile
99.1%
Related for CISA-KEV-CVE-2024-38856